$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: 9m7qZNRBbTPXLkAdGZgxXSXdPuBzPezMDlJuHa0aUA8= Subject key identifier: 7B:BE:9F:46:4A:3A:A5:4F:32:66:4B:4A:0A:6D:14:10:EA:22:14:56 Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 0EE22E97ED85987F10416035869AF2238EBCFA33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: 0104 Signing time: Mon 04 Aug 2025 14:01:18 +0000 Manifest this update: Mon 04 Aug 2025 13:56:18 +0000 Manifest next update: Fri 08 Aug 2025 01:01:18 +0000 Files and hashes: 1: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=) 2: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: 574GRNXXcPUUGDiwkh4f2Agk+sIKPA+/ilUozUMUPrM=) 3: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: qufNb3/LUFwbrIvm8YtRzGBfloSV6jK/5s6hJyz0aXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e2:2e:97:ed:85:98:7f:10:41:60:35:86:9a:f2:23:8e:bc:fa:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Aug 4 13:56:18 2025 GMT Not After : Aug 8 01:01:18 2025 GMT Subject: CN=7BBE9F464A3AA54F32664B4A0A6D1410EA221456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:60:fd:bb:73:be:e7:35:30:04:f4:8c:db: c7:70:10:b4:f3:d4:24:c5:30:46:d0:89:58:53:9c: 0b:69:8e:a8:08:d2:2d:6e:da:ed:51:89:0a:55:ec: 54:a1:94:47:0b:ed:e0:7e:b5:2b:dd:5f:6d:c5:ba: 55:51:37:18:23:6a:13:e0:71:8f:49:63:9c:0e:27: d4:76:e3:7d:86:39:cb:d0:e3:ee:1d:0b:1e:f2:9a: 04:72:6c:28:9e:ba:2b:a3:ce:ae:30:63:32:a4:9b: b4:7b:ea:ef:c2:84:77:61:20:f1:4d:2d:bc:5f:ab: ad:36:df:4b:21:79:78:d8:fd:02:72:2b:ca:24:ff: 94:6b:43:54:8e:23:48:34:33:62:8a:ce:c2:c0:da: 44:09:a6:28:7c:95:31:10:de:ff:31:b2:e2:53:d6: 79:ce:aa:44:de:60:c0:20:a7:57:38:85:b8:45:e5: 9c:0a:e2:5b:4a:ff:21:a7:3e:bc:68:34:8f:4d:2d: 76:ab:98:90:af:d0:4c:74:d8:7d:65:d5:cc:d3:33: 75:5d:b8:69:9f:49:f3:bc:ec:be:6d:74:66:7d:d2: 94:34:58:d2:a7:88:0e:8c:2d:3f:13:60:fb:08:62: 93:31:0e:5e:73:4a:57:45:ee:d8:c6:24:94:f3:17: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BE:9F:46:4A:3A:A5:4F:32:66:4B:4A:0A:6D:14:10:EA:22:14:56 X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:dc:86:32:a8:dd:9a:3d:c8:37:7f:7d:51:78:54:c5:39:92: 92:7c:01:24:67:ca:45:d8:20:04:63:48:c5:18:1a:7b:35:65: 20:c2:09:05:bd:fb:44:0c:b7:6c:36:2f:ef:a6:1b:41:06:5c: d0:4a:0a:e0:34:2f:42:75:52:7a:55:40:b1:b3:d2:c8:a5:31: e5:5e:50:92:96:bc:38:27:6a:46:08:78:d8:af:c0:c8:91:fd: 04:19:f0:00:39:7d:2e:b5:90:29:1a:43:b6:aa:2a:a4:8f:26: b1:0c:25:1b:58:db:db:a6:fb:ba:1d:b6:86:f2:28:44:7c:ce: 07:f6:3d:c9:05:95:a3:22:fb:c9:76:76:74:ad:e6:56:88:05: 06:fa:5c:44:9f:14:ed:58:fa:8d:36:f9:cf:94:24:0a:cb:ca: a7:65:3a:7b:28:c1:0d:af:07:5d:71:86:40:14:41:ff:14:06: dc:be:70:fc:49:bf:31:7a:77:22:7f:06:8d:6e:6a:8e:1d:57: 5e:55:f6:e8:42:d5:8a:1e:5e:61:0c:2f:cd:4e:c4:af:2d:4d: f9:0c:16:bc:88:d1:76:5d:1d:fa:ce:f9:40:30:63:44:18:a2: 44:4f:cf:e6:a2:da:c4:1d:55:69:bb:ad:c9:e6:9f:db:7b:fa: 97:de:39:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuIul+2FmH8QQWA1hpryI468+jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNTA4MDQxMzU2MThaFw0yNTA4MDgwMTAxMThaMDMxMTAvBgNV BAMTKDdCQkU5RjQ2NEEzQUE1NEYzMjY2NEI0QTBBNkQxNDEwRUEyMjE0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZ2D9u3O+5zUwBPSM28dwELTz 1CTFMEbQiVhTnAtpjqgI0i1u2u1RiQpV7FShlEcL7eB+tSvdX23FulVRNxgjahPg cY9JY5wOJ9R2432GOcvQ4+4dCx7ymgRybCieuiujzq4wYzKkm7R76u/ChHdhIPFN Lbxfq60230sheXjY/QJyK8ok/5RrQ1SOI0g0M2KKzsLA2kQJpih8lTEQ3v8xsuJT 1nnOqkTeYMAgp1c4hbhF5ZwK4ltK/yGnPrxoNI9NLXarmJCv0Ex02H1l1czTM3Vd uGmfSfO87L5tdGZ90pQ0WNKniA6MLT8TYPsIYpMxDl5zSldF7tjGJJTzF1mrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe76fRko6pU8yZktKCm0UEOoiFFYwHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjchjKo3Zo9yDd/fVF4VMU5kpJ8ASRnykXY IARjSMUYGns1ZSDCCQW9+0QMt2w2L++mG0EGXNBKCuA0L0J1UnpVQLGz0silMeVe UJKWvDgnakYIeNivwMiR/QQZ8AA5fS61kCkaQ7aqKqSPJrEMJRtY29um+7odtoby KER8zgf2PckFlaMi+8l2dnSt5laIBQb6XESfFO1Y+o02+c+UJArLyqdlOnsowQ2v B11xhkAUQf8UBty+cPxJvzF6dyJ/Bo1uao4dV15V9uhC1YoeXmEML81OxK8tTfkM FryI0XZdHfrO+UAwY0QYokRPz+ai2sQdVWm7rcnmn9t7+pfeOfI= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:20 2025 by rpki-client